@symerian/symi 2.8.11 → 2.8.13

package/dist/{configure-DiDXmX3E.js → configure-BQUkaPdS.js}

@@ -11,14 +11,14 @@ import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint }
 import { t as note$1 } from "./note-DewoEWtc.js";
 import { t as WizardCancelledError } from "./prompts-DbHSz44H.js";
 import { t as createClackPrompter } from "./clack-prompter-CTPf_777.js";
-import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-CYlZtWF6.js";
+import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-D8bDJYPc.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-D_elkkFW.js";
 import { t as resolveGatewayService } from "./service-RxN7lQKN.js";
-import { r as healthCommand } from "./health-D-0xOxV8.js";
+import { r as healthCommand } from "./health-fOu0S75U.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Clf7H-Sm.js";
 import { n as logConfigUpdated } from "./logging-PVQxLC6I.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-DF6R_pgV.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-j1FEYnxv.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-BKwypsnS.js";
 import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-n7beL1F5.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-ipoPa7o0.js";
 import { a as promptCustomApiConfig } from "./onboard-custom-CJGSIPt3.js";

package/dist/{configure-COCCg2tV.js → configure-OUiXvgMg.js}

@@ -13,14 +13,14 @@ import { n as stylePromptMessage, r as stylePromptTitle, t as stylePromptHint }
 import { t as note$1 } from "./note-ByDX0v9V.js";
 import { t as WizardCancelledError } from "./prompts-NOUgk6FH.js";
 import { t as createClackPrompter } from "./clack-prompter-CM5UgVAv.js";
-import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-BgA4i9TU.js";
+import { r as setupChannels, t as noteChannelStatus } from "./onboard-channels-DpZkjldS.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-Cp7obV7Q.js";
 import { t as resolveGatewayService } from "./service-DzLem5vL.js";
-import { r as healthCommand } from "./health-BAjSATWA.js";
+import { r as healthCommand } from "./health-D4vU-wV-.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BrP31IQR.js";
 import { n as logConfigUpdated } from "./logging-CZuxhCZR.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-PeQmwVpp.js";
-import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-DnKOB8Gs.js";
+import { i as applyAuthChoice, n as resolvePreferredProviderForAuthChoice } from "./auth-choice-BIlBt2d0.js";
 import { a as promptDefaultModel, n as applyModelFallbacksFromSelection, o as promptModelAllowlist, r as applyPrimaryModel, t as applyModelAllowlist } from "./model-picker-BNWV-jU4.js";
 import { t as ensureSystemdUserLingerInteractive } from "./systemd-linger-0C265XKH.js";
 import { a as promptCustomApiConfig } from "./onboard-custom-Dk9cL3Uu.js";

package/dist/{deliver-qUx-eLKt.js → deliver-B0OUq6RP.js}

@@ -3,7 +3,7 @@ import { s as resolveStateDir } from "./paths-CE7eVGHg.js";
 import { m as normalizeOptionalAccountId, p as normalizeAccountId } from "./session-key-BCzIW1Y2.js";
 import { c as getActivePluginRegistry, v as createInternalHookEvent, x as triggerInternalHook } from "./registry-DYq1AYOv.js";
 import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
-import { B as resolveMirroredTranscriptText, i as isMessagingToolDuplicate, z as appendAssistantMessageToSessionTranscript } from "./pi-embedded-helpers-P13adotN.js";
+import { B as resolveMirroredTranscriptText, i as isMessagingToolDuplicate, z as appendAssistantMessageToSessionTranscript } from "./pi-embedded-helpers-D1_Sab0M.js";
 import { d as getChannelDock } from "./thinking-BprCy23Z.js";
 import { r as normalizeChannelId, t as getChannelPlugin } from "./plugins-BzmbgY7s.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-W0JzCJJM.js";

package/dist/{doctor-completion-CophMO9P.js → doctor-completion-BSMAyCq_.js}

@@ -1,7 +1,7 @@
 import { t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { r as resolveCliName } from "./command-format-COaS-S7B.js";
 import { t as note } from "./note-ByDX0v9V.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-B4YP0Otu.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-Bw0jbNaG.js";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 

package/dist/{doctor-completion-CjlRDZow.js → doctor-completion-DlKvncR9.js}

@@ -1,7 +1,7 @@
 import { r as resolveCliName } from "./command-format-BtYOfWxC.js";
 import { t as resolveSymiPackageRoot } from "./symi-root-BNuQ4lAT.js";
 import { t as note } from "./note-DewoEWtc.js";
-import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-B1JkGibL.js";
+import { a as resolveCompletionCachePath, i as isCompletionInstalled, o as resolveShellFromEnv, r as installCompletion, s as usesSlowDynamicCompletion, t as completionCacheExists } from "./completion-cli-C5GCKfKT.js";
 import { spawnSync } from "node:child_process";
 import path from "node:path";
 

package/dist/entry.js

@@ -2500,7 +2500,7 @@ if (!ensureExperimentalWarningSuppressed()) {
 		applyCliProfileEnv({ profile: parsed.profile });
 		process$1.argv = parsed.argv;
 	}
-	import("./run-main-DmgESA-W.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
+	import("./run-main-7BEaNeDG.js").then(({ runCli }) => runCli(process$1.argv)).catch((error) => {
 		console.error("[symi] Failed to start CLI:", error instanceof Error ? error.stack ?? error.message : error);
 		process$1.exitCode = 1;
 	});

package/dist/extensionAPI.js

@@ -7,7 +7,7 @@ import { a as resolveAgentIdentity } from "./reply-prefix-K_J_nfgx.js";
 import "./github-copilot-token-BbsJ0Qbo.js";
 import "./env-CQ_DQOwT.js";
 import "./tokens-Cn6drXx2.js";
-import { O as resolveAgentTimeoutMs, m as runEmbeddedPiAgent } from "./pi-embedded-HSRJqesT.js";
+import { O as resolveAgentTimeoutMs, m as runEmbeddedPiAgent } from "./pi-embedded-DCBB1_SC.js";
 import "./plugins-71oIavrF.js";
 import "./accounts-DDEyGwby.js";
 import "./bindings-DYVakimr.js";
@@ -35,7 +35,7 @@ import "./accounts-DImOt9jX.js";
 import { n as resolveSessionFilePath, s as resolveStorePath } from "./paths-DkMamAQ-.js";
 import "./tool-images-ChC2CXaN.js";
 import "./image-tzIqIuKx.js";
-import "./manager-B5JWZL0E.js";
+import "./manager-DRrGn88w.js";
 import "./gemini-auth-DVcG-42i.js";
 import "./retry-QGp0jvVi.js";
 import "./sqlite-Bo4pHfp8.js";

package/dist/{gateway-cli-Dlcx0rsS.js → gateway-cli-BlRNLVfU.js}

@@ -22,7 +22,7 @@ import "./pairing-token-Byh6drgn.js";
 import { t as safeEqualSecret } from "./secret-equal-CbntzRkh.js";
 import { a as isValidIPv4, c as resolveClientIp, d as resolveHostName, f as rawDataToString, i as isTrustedProxyAddress, l as resolveGatewayBindHost, n as isLoopbackHost, o as normalizeHostHeader, t as isLoopbackAddress, u as resolveGatewayListenHosts } from "./net-DZ5Ayk-W.js";
 import { n as pickPrimaryTailnetIPv4, r as pickPrimaryTailnetIPv6 } from "./tailnet-Cmumpn76.js";
-import { $ as getCliSessionId, $t as setPreRestartDeferralCheck, An as DEFAULT_INPUT_TIMEOUT_MS, At as normalizeOptionalSessionKey, Bt as buildSafeExternalPrompt, Cn as enqueueSystemEvent, Cr as onAgentEvent, Dn as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as createDefaultDeps, F as buildHistoryContextFromEntries, Ft as buildDeliveryFromLegacyPayload, H as getTotalPendingReplies, Ht as getHookType, In as resolveAgentTimeoutMs, It as hasLegacyDeliveryHints, J as runAgentTurn, Jt as emitGatewayRestart, Kt as consumeGatewaySigusr1RestartAuthorization, Lt as stripLegacyDeliveryFields, Mn as extractImageContentFromSource, Mt as normalizePayloadToSystemText, Nn as normalizeMimeList, Nt as normalizeRequiredName, O as resolveAgentAvatar, On as DEFAULT_INPUT_IMAGE_MIMES, Ot as inferLegacyName, Pn as resolveInputFileLimits, Pt as migrateLegacyCronPayload, Q as resolveModelProfile, Qt as setGatewaySigusr1RestartPolicy, Sr as getAgentRunContext, St as summarizeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeHttpWebhookUrl, Ut as isExternalHookSession, Vt as detectSuspiciousPatterns, X as getActiveEmbeddedRunCount, Xt as markGatewaySigusr1RestartHandled, Yt as isGatewaySigusr1RestartExternallyAllowed, _ as readJsonBodyWithLimit, at as resolveAnnounceTargetFromKey, b as sleepWithAbort, br as clearAgentRunContext, bt as formatRestartSentinelMessage, cr as getActiveTaskCount, ct as resolveOutboundSessionRoute, dn as requestHeartbeatNow, dr as resetAllLanes, dt as resolveOutboundTarget, et as setCliSessionId, f as getPluginToolMeta, fr as setCommandLaneConcurrency, ft as resolveSessionDeliveryTarget, g as handleSlackHttpRequest, gt as runWithModelFallback, hr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, i as listDescendantRunsForRequester, it as readLatestAssistantReply, jn as extractFileContentFromSource, jt as normalizeOptionalText, kn as DEFAULT_INPUT_MAX_REDIRECTS, kt as normalizeOptionalAgentId, l as applyToolPolicyPipeline, m as loadSymiPlugins, mr as CommandLane, mt as resetDirectoryCache, n as countActiveRunsForSession, pr as waitForActiveTasks, q as resolveCronStyleNow, qt as deferGatewayRestartUntilIdle, r as initSubagentRegistry, rt as createSymiTools, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as runCliAgent, u as buildDefaultToolPolicyPipelineSteps, ur as getTotalQueueSize, v as requestBodyErrorToText, vt as consumeRestartSentinel, wr as registerAgentRunContext, x as agentCommand, xr as emitAgentEvent, y as computeBackoff, yr as stripHeartbeatToken } from "./subagent-registry-BCWbFTGF.js";
+import { $ as getCliSessionId, $t as setPreRestartDeferralCheck, An as DEFAULT_INPUT_TIMEOUT_MS, At as normalizeOptionalSessionKey, Bt as buildSafeExternalPrompt, Cn as enqueueSystemEvent, Cr as onAgentEvent, Dn as DEFAULT_INPUT_IMAGE_MAX_BYTES, E as createDefaultDeps, F as buildHistoryContextFromEntries, Ft as buildDeliveryFromLegacyPayload, H as getTotalPendingReplies, Ht as getHookType, In as resolveAgentTimeoutMs, It as hasLegacyDeliveryHints, J as runAgentTurn, Jt as emitGatewayRestart, Kt as consumeGatewaySigusr1RestartAuthorization, Lt as stripLegacyDeliveryFields, Mn as extractImageContentFromSource, Mt as normalizePayloadToSystemText, Nn as normalizeMimeList, Nt as normalizeRequiredName, O as resolveAgentAvatar, On as DEFAULT_INPUT_IMAGE_MIMES, Ot as inferLegacyName, Pn as resolveInputFileLimits, Pt as migrateLegacyCronPayload, Q as resolveModelProfile, Qt as setGatewaySigusr1RestartPolicy, Sr as getAgentRunContext, St as summarizeRestartSentinel, T as createOutboundSendDeps, Tt as normalizeHttpWebhookUrl, Ut as isExternalHookSession, Vt as detectSuspiciousPatterns, X as getActiveEmbeddedRunCount, Xt as markGatewaySigusr1RestartHandled, Yt as isGatewaySigusr1RestartExternallyAllowed, _ as readJsonBodyWithLimit, at as resolveAnnounceTargetFromKey, b as sleepWithAbort, br as clearAgentRunContext, bt as formatRestartSentinelMessage, cr as getActiveTaskCount, ct as resolveOutboundSessionRoute, dn as requestHeartbeatNow, dr as resetAllLanes, dt as resolveOutboundTarget, et as setCliSessionId, f as getPluginToolMeta, fr as setCommandLaneConcurrency, ft as resolveSessionDeliveryTarget, g as handleSlackHttpRequest, gt as runWithModelFallback, hr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, i as listDescendantRunsForRequester, it as readLatestAssistantReply, jn as extractFileContentFromSource, jt as normalizeOptionalText, kn as DEFAULT_INPUT_MAX_REDIRECTS, kt as normalizeOptionalAgentId, l as applyToolPolicyPipeline, m as loadSymiPlugins, mr as CommandLane, mt as resetDirectoryCache, n as countActiveRunsForSession, pr as waitForActiveTasks, q as resolveCronStyleNow, qt as deferGatewayRestartUntilIdle, r as initSubagentRegistry, rt as createSymiTools, s as runSubagentAnnounceFlow, t as countActiveDescendantRuns, tt as runCliAgent, u as buildDefaultToolPolicyPipelineSteps, ur as getTotalQueueSize, v as requestBodyErrorToText, vt as consumeRestartSentinel, wr as registerAgentRunContext, x as agentCommand, xr as emitAgentEvent, y as computeBackoff, yr as stripHeartbeatToken } from "./subagent-registry-BvP8AGdE.js";
 import { D as resolveSessionResetPolicy, F as resolveMainSessionKey, H as cleanStaleLockFiles, I as resolveMainSessionKeyFromConfig, K as mergeDeliveryContext, M as canonicalizeMainSessionAlias, N as resolveAgentMainSessionKey, T as evaluateSessionFreshness, W as deliveryContextFromSession, d as updateSessionStore, n as parseSessionThreadInfo, o as loadSessionStore } from "./sessions-BPD85pWA.js";
 import { a as isSilentReplyText, n as SILENT_REPLY_TOKEN } from "./tokens-Csntmwwn.js";
 import { n as listChannelPlugins, o as normalizeWhatsAppTarget, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CwSlLxM8.js";
@@ -60,8 +60,8 @@ import "./tool-images-CVLISeRT.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-8sKPnzpp.js";
 import "./models-config-J1x_DaPn.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-BUN71nd5.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-r-ulsUBa.js";
-import { a as resolveMemorySearchConfig } from "./manager-BxJ9BhQe.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BSOOwpt1.js";
+import { a as resolveMemorySearchConfig } from "./manager-syNf_ZrI.js";
 import "./gemini-auth-DEakvf-D.js";
 import "./retry-C4Q_VPOo.js";
 import "./sqlite-BP8tiuca.js";
@@ -106,7 +106,7 @@ import "./replies-Sxbew659.js";
 import { C as normalizeControlUiBasePath, S as buildControlUiAvatarUrl, c as handleReset, w as resolveAssistantAvatarUrl, x as CONTROL_UI_AVATAR_PREFIX } from "./onboard-helpers-CF0Cp3OB.js";
 import "./prompt-style-BxVdnrLq.js";
 import "./pairing-labels-BHx_CdbP.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-dbCkhLDL.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-QIVWAVVI.js";
 import { i as onHeartbeatEvent, t as resolveHeartbeatVisibility } from "./heartbeat-visibility-D0_vbMWW.js";
 import { t as ensureSymiCliOnPath } from "./path-env-CaiY2aOj.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-Cw6NBIXW.js";
@@ -129,22 +129,22 @@ import "./diagnostics-C6xPE2ln.js";
 import "./table-Bka4fasy.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-BrG9qS1M.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-vevi4OAS.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-F5zQ_Wk9.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-Oa5dsn5p.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-BWaTCKHh.js";
-import { i as pickGatewaySelfPresence } from "./status-WMQ2CpbK.js";
-import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-D-0xOxV8.js";
+import { i as pickGatewaySelfPresence } from "./status-DMigoL7q.js";
+import { a as styleHealthChannelLine, l as startHeartbeatRunner, n as getHealthSnapshot, s as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-fOu0S75U.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Clf7H-Sm.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-BNjupSIM.js";
-import { t as runOnboardingWizard } from "./onboarding-CvK25SU5.js";
-import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-EJZ_r3g7.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-tfhjtI57.js";
+import { t as runOnboardingWizard } from "./onboarding-BsPnnH5g.js";
+import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-CTeJHJSZ.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-rPetW5cI.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-YTXXLbHH.js";
-import "./agents.config-LE2JxgiS.js";
+import "./agents.config-BnPC7uct.js";
 import "./dm-policy-shared-JiSNSaKz.js";
 import "./node-service-B-qdOCNb.js";
 import "./status.update-B5zI1_Id.js";
 import "./skills-install-BnEN_qla.js";
-import "./update-runner-BQJSshFU.js";
+import "./update-runner-B_yVOk8Z.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-Dgz7kkUM.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-mCPSj6kV.js";
 import { n as forceFreePortAndWait } from "./ports-DQg7kV5s.js";
@@ -5405,6 +5405,174 @@ function applyGatewayLaneConcurrency(cfg) {
 	setCommandLaneConcurrency(CommandLane.Subagent, resolveSubagentMaxConcurrent(cfg));
 }
 
+//#endregion
+//#region src/infra/long-task-janitor.ts
+const TASK_FILE_SUFFIXES = [
+	".pid",
+	".cmd",
+	".started",
+	".log",
+	".status"
+];
+const TASK_FILE_PREFIX = "task-";
+const DEFAULT_TASK_FILE_AGE_MS = 10080 * 60 * 1e3;
+const DEFAULT_SWEEP_INTERVAL_MS = 1440 * 60 * 1e3;
+function defaultIsPidAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "EPERM") return true;
+		return false;
+	}
+}
+/**
+* Sweep dead-task state files from a single workspace directory.
+*
+* A task-id is eligible for sweep when its recorded PID is no longer alive
+* AND the oldest of its state files is older than ageMs. Conservative on
+* purpose: leaving a stale set for one extra cycle is harmless; deleting
+* the state of a live task is not.
+*
+* Orphans without a `.pid` file (parent crashed before line 180) are also
+* caught — we key on any task-<id>.<suffix> match.
+*/
+async function sweepLongTaskFiles(workdir, options = {}) {
+	const result = {
+		scanned: 0,
+		swept: 0,
+		errors: 0,
+		sweptIds: []
+	};
+	const now = options.now ?? Date.now();
+	const ageMs = options.ageMs ?? DEFAULT_TASK_FILE_AGE_MS;
+	const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
+	let entries;
+	try {
+		entries = await fs.promises.readdir(workdir);
+	} catch {
+		return result;
+	}
+	const taskIds = /* @__PURE__ */ new Set();
+	for (const entry of entries) {
+		if (!entry.startsWith(TASK_FILE_PREFIX)) continue;
+		for (const suffix of TASK_FILE_SUFFIXES) if (entry.endsWith(suffix)) {
+			const id = entry.slice(5, -suffix.length);
+			if (id.length > 0) taskIds.add(id);
+			break;
+		}
+	}
+	for (const taskId of taskIds) {
+		result.scanned++;
+		const pidPath = path.join(workdir, `${TASK_FILE_PREFIX}${taskId}.pid`);
+		let pid = 0;
+		let pidStatMs = null;
+		try {
+			const pidText = await fs.promises.readFile(pidPath, "utf8");
+			pid = Number.parseInt(pidText.trim(), 10);
+			pidStatMs = (await fs.promises.stat(pidPath)).mtimeMs;
+		} catch (err) {
+			if (err.code !== "ENOENT") {
+				result.errors++;
+				continue;
+			}
+		}
+		if (pid > 0 && Number.isFinite(pid) && isPidAlive(pid)) continue;
+		let oldestMs = pidStatMs ?? Number.POSITIVE_INFINITY;
+		for (const suffix of TASK_FILE_SUFFIXES) {
+			if (suffix === ".pid" && pidStatMs !== null) continue;
+			try {
+				const stat = await fs.promises.stat(path.join(workdir, `${TASK_FILE_PREFIX}${taskId}${suffix}`));
+				if (stat.mtimeMs < oldestMs) oldestMs = stat.mtimeMs;
+			} catch {}
+		}
+		if (!Number.isFinite(oldestMs)) continue;
+		if (now - oldestMs < ageMs) continue;
+		let unlinkErrors = 0;
+		for (const suffix of TASK_FILE_SUFFIXES) try {
+			await fs.promises.unlink(path.join(workdir, `${TASK_FILE_PREFIX}${taskId}${suffix}`));
+		} catch (err) {
+			if (err.code !== "ENOENT") unlinkErrors++;
+		}
+		if (unlinkErrors > 0) result.errors++;
+		else {
+			result.swept++;
+			result.sweptIds.push(taskId);
+		}
+	}
+	return result;
+}
+async function collectAgentWorkspaces(cfg) {
+	const config = cfg ?? loadConfig();
+	const seen = /* @__PURE__ */ new Set();
+	for (const agentId of listAgentIds(config)) try {
+		const ws = resolveAgentWorkspaceDir(config, agentId);
+		if (ws) seen.add(ws);
+	} catch {}
+	return [...seen];
+}
+let janitorTimer = null;
+let janitorBootKick = null;
+function startLongTaskJanitor(options = {}) {
+	if (janitorTimer) return () => stopLongTaskJanitor();
+	const log = getChildLogger({ module: "long-task-janitor" });
+	const intervalMs = options.intervalMs ?? DEFAULT_SWEEP_INTERVAL_MS;
+	const ageMs = options.ageMs ?? DEFAULT_TASK_FILE_AGE_MS;
+	const getWorkspaces = options.getWorkspaces ?? (() => collectAgentWorkspaces());
+	const nowFn = options.now ?? Date.now;
+	const sweep = async () => {
+		let workspaces = [];
+		try {
+			workspaces = await getWorkspaces();
+		} catch (err) {
+			log.warn({ err: String(err) }, "long-task-janitor: collect workspaces failed");
+			return;
+		}
+		let scanned = 0;
+		let swept = 0;
+		let errors = 0;
+		for (const ws of workspaces) try {
+			const r = await sweepLongTaskFiles(ws, {
+				now: nowFn(),
+				ageMs
+			});
+			scanned += r.scanned;
+			swept += r.swept;
+			errors += r.errors;
+		} catch (err) {
+			errors++;
+			log.warn({
+				err: String(err),
+				workdir: ws
+			}, "long-task-janitor: sweep failed");
+		}
+		if (swept > 0 || errors > 0) log.info({
+			scanned,
+			swept,
+			errors
+		}, "long-task-janitor: sweep complete");
+	};
+	janitorBootKick = setTimeout(() => {
+		sweep();
+	}, 6e4);
+	janitorBootKick.unref?.();
+	janitorTimer = setInterval(() => {
+		sweep();
+	}, intervalMs);
+	janitorTimer.unref?.();
+	return () => stopLongTaskJanitor();
+}
+function stopLongTaskJanitor() {
+	if (janitorTimer) {
+		clearInterval(janitorTimer);
+		janitorTimer = null;
+	}
+	if (janitorBootKick) {
+		clearTimeout(janitorBootKick);
+		janitorBootKick = null;
+	}
+}
+
 //#endregion
 //#region src/gateway/server/health-state.ts
 let presenceVersion = 1;
@@ -5493,6 +5661,7 @@ function startGatewayMaintenanceTimers(params) {
 		params.refreshGatewayHealthSnapshot({ probe: true }).catch((err) => params.logHealth.error(`refresh failed: ${formatError(err)}`));
 	}, HEALTH_REFRESH_INTERVAL_MS);
 	params.refreshGatewayHealthSnapshot({ probe: true }).catch((err) => params.logHealth.error(`initial refresh failed: ${formatError(err)}`));
+	startLongTaskJanitor();
 	return {
 		tickInterval,
 		healthInterval,
@@ -11955,7 +12124,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-GEiZsdru.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-DxrESDzy.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,

package/dist/{gateway-cli-CAPtJ_VJ.js → gateway-cli-NI7W2QxR.js}

@@ -1,7 +1,7 @@
 import { _ as expandHomePrefix, g as resolveStateDir, i as isNixMode, l as resolveGatewayLockDir, o as resolveConfigPath, r as STATE_DIR, t as CONFIG_PATH, u as resolveGatewayPort } from "./paths-Cqn-zk3M.js";
 import { B as theme, E as truncateUtf16Safe, H as getLogger, P as setVerbose, R as colorize, S as shortenHomePath, U as getResolvedLoggerSettings, V as getChildLogger, c as ensureDir, t as CONFIG_DIR, y as resolveUserPath, z as isRich } from "./utils-B-0b9bGM.js";
 import { d as supportsXHighThinking, l as normalizeVerboseLevel, s as normalizeThinkLevel } from "./thinking-EAliFiVK.js";
-import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, _ as loadCombinedSessionStoreForGateway, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, g as listSessionsFromStore, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-C5VU6T-F.js";
+import { $ as buildDeliveryFromLegacyPayload, A as emitGatewayRestart, An as initSubagentRegistry, Ar as extractImageContentFromSource, B as summarizeRestartSentinel, Bn as registerAgentRunContext, Ct as requestBodyErrorToText, Dr as DEFAULT_INPUT_MAX_REDIRECTS, E as resetDirectoryCache, Er as DEFAULT_INPUT_IMAGE_MIMES, Et as agentCommand, F as setPreRestartDeferralCheck, Fn as readLatestAssistantReply, Gt as getCliSessionId, I as consumeRestartSentinel, In as clearAgentRunContext, J as normalizeOptionalSessionKey, K as inferLegacyName, Kt as setCliSessionId, Ln as emitAgentEvent, Lt as createDefaultDeps, M as markGatewaySigusr1RestartHandled, Mr as resolveInputFileLimits, Mt as resolveOutboundTarget, Nt as resolveSessionDeliveryTarget, O as consumeGatewaySigusr1RestartAuthorization, On as countActiveDescendantRuns, Or as DEFAULT_INPUT_TIMEOUT_MS, P as setGatewaySigusr1RestartPolicy, Pn as runSubagentAnnounceFlow, Pr as resolveAgentTimeoutMs, Pt as createOutboundSendDeps, Q as migrateLegacyCronPayload, R as formatRestartSentinelMessage, Rn as getAgentRunContext, St as readJsonBodyWithLimit, Tr as DEFAULT_INPUT_IMAGE_MAX_BYTES, Tt as sleepWithAbort, U as normalizeHttpWebhookUrl, Ut as resolveModelProfile, Vt as getActiveEmbeddedRunCount, Wt as runWithModelFallback, X as normalizePayloadToSystemText, Xt as resolveAgentAvatar, Y as normalizeOptionalText, Z as normalizeRequiredName, _ as loadCombinedSessionStoreForGateway, ar as setCommandLaneConcurrency, cn as buildHistoryContextFromEntries, cr as DEFAULT_HEARTBEAT_ACK_MAX_CHARS, d as createSymiTools, en as buildSafeExternalPrompt, et as hasLegacyDeliveryHints, f as resolveAnnounceTargetFromKey, fr as stripHeartbeatToken, ft as loadSymiPlugins, g as listSessionsFromStore, hn as getTotalPendingReplies, i as resolveCronStyleNow, ir as resetAllLanes, j as isGatewaySigusr1RestartExternallyAllowed, jn as listDescendantRunsForRequester, jr as normalizeMimeList, k as deferGatewayRestartUntilIdle, kn as countActiveRunsForSession, kr as extractFileContentFromSource, l as applyToolPolicyPipeline, nn as getHookType, or as waitForActiveTasks, pr as lookupContextTokens, q as normalizeOptionalAgentId, qt as runCliAgent, rn as isExternalHookSession, rr as getTotalQueueSize, sr as CommandLane, st as requestHeartbeatNow, tn as detectSuspiciousPatterns, tr as getActiveTaskCount, tt as stripLegacyDeliveryFields, u as buildDefaultToolPolicyPipelineSteps, ut as getPluginToolMeta, v as loadSessionEntry, w as resolveOutboundSessionRoute, wt as computeBackoff, xr as enqueueSystemEvent, xt as handleSlackHttpRequest, zn as onAgentEvent, zt as runAgentTurn } from "./reply-D7_t00Jt.js";
 import { S as parseAgentSessionKey, c as normalizeMainKey, f as toAgentRequestSessionKey, l as resolveAgentIdFromSessionKey, m as DEFAULT_ACCOUNT_ID, p as toAgentStoreSessionKey, r as buildAgentMainSessionKey, s as normalizeAgentId, t as DEFAULT_AGENT_ID, x as isSubagentSessionKey, y as isCronRunSessionKey } from "./session-key-DCt45XZa.js";
 import { r as matchesSkillFilter, t as resolveSymiPackageRoot } from "./symi-root-CrGJbkzf.js";
 import { C as createInternalHookEvent, S as clearInternalHooks, T as triggerInternalHook, m as createEmptyPluginRegistry, r as DEFAULT_CHAT_CHANNEL, w as registerInternalHook } from "./registry-Cja8eT7G.js";
@@ -67,8 +67,8 @@ import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-DpMnSIi5.js";
 import "./model-ECsJuJew.js";
 import { a as resolveAgentIdentity } from "./reply-prefix-CE2YmmsD.js";
-import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-BQZ0rTKC.js";
-import { a as resolveMemorySearchConfig } from "./manager-BpvcDr-7.js";
+import { i as resolveMemoryBackendConfig, r as getMemorySearchManager } from "./memory-cli-0jm-n36m.js";
+import { a as resolveMemorySearchConfig } from "./manager-TOeH0D8K.js";
 import "./retry-BoS4e4X_.js";
 import "./sqlite-D55gRQbH.js";
 import { a as ToolInputError } from "./target-errors-C9e6dMU_.js";
@@ -106,7 +106,7 @@ import "./pairing-labels-CTL1gXZb.js";
 import { n as formatTokenCount, r as formatUsd } from "./usage-format-D4P4IiJ6.js";
 import { t as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS } from "./exec-approvals-DEigTi7M.js";
 import "./nodes-screen-BZS89z6C.js";
-import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BPVIDK7o.js";
+import { a as resolveSubagentToolPolicy, i as resolveGroupToolPolicy, r as resolveEffectiveToolPolicy } from "./pi-tools.policy-BZrM6a-w.js";
 import "./control-service-C0pRqIFv.js";
 import { i as parseAbsoluteTimeMs, n as resolveCronStaggerMs, r as resolveDefaultCronStaggerMs, t as normalizeCronStaggerMs } from "./stagger-CZ1Rrj7O.js";
 import { n as resolveMessageChannelSelection } from "./channel-selection-9fIQGtZy.js";
@@ -134,22 +134,22 @@ import "./diagnostics-1uBuB9IE.js";
 import "./table-BWuvjnmY.js";
 import { n as resolveWideAreaDiscoveryDomain, r as writeWideAreaGatewayZone } from "./widearea-dns-Curv3BNf.js";
 import { i as toOptionString, n as extractGatewayMiskeys, r as maybeExplainGatewayServiceStop, t as describeUnknownError } from "./shared-pJIdlnB5.js";
-import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-CNU0I_UT.js";
+import { c as probeGateway, s as resolveNodeCommandAllowlist } from "./audit-Bi9Je9FZ.js";
 import { t as discoverGatewayBeacons } from "./bonjour-discovery-CDkyebpA.js";
-import { r as pickGatewaySelfPresence } from "./status-C_gwgMp4.js";
-import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-BAjSATWA.js";
+import { r as pickGatewaySelfPresence } from "./status-DLFbpd9v.js";
+import { c as startHeartbeatRunner, i as styleHealthChannelLine, n as getHealthSnapshot, o as runHeartbeatOnce, t as formatHealthChannelLines } from "./health-D4vU-wV-.js";
 import { a as resolveControlUiRootSync, i as resolveControlUiRootOverrideSync, t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BrP31IQR.js";
 import { a as resolveNpmChannelTag, c as DEFAULT_PACKAGE_CHANNEL, m as normalizeUpdateChannel, n as compareSemverStrings, t as checkUpdateStatus } from "./update-check-Bbvpax6u.js";
-import { t as runOnboardingWizard } from "./onboarding-DFNiU6QZ.js";
-import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-kM6zF8qf.js";
-import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-CB_8WzQ9.js";
+import { t as runOnboardingWizard } from "./onboarding-c2qhwP0x.js";
+import { C as startGatewayConfigReloader, S as resolveCronRunLogPath, _ as MAX_PAYLOAD_BYTES, a as loadFavoritesSet, b as abortChatRunById, c as resolveAssistantIdentity, d as formatError, f as loadVoiceWakeConfig, g as MAX_BUFFERED_BYTES, h as HEALTH_REFRESH_INTERVAL_MS, i as safeParseJson, l as listSystemPresence, m as DEDUPE_TTL_MS, n as handleGatewayRequest, o as reconcileFavorites, p as DEDUPE_MAX, r as broadcastPresenceSnapshot, s as DEFAULT_ASSISTANT_IDENTITY, t as coreGatewayHandlers, u as upsertPresence, v as TICK_INTERVAL_MS, x as appendCronRunLog, y as getHandshakeTimeoutMs } from "./server-methods-FQ-PqiVC.js";
+import { d as shouldLogWs, f as summarizeAgentEventForWsLog, l as formatForLog, p as setGatewayWsLogStyle, u as logWs } from "./push-apns-Cr-a1KBt.js";
 import { T as resolveGmailHookRuntimeConfig, _ as buildGogWatchServeArgs, i as ensureTailscaleEndpoint, v as buildGogWatchStartArgs } from "./gmail-setup-utils-CjltkjCx.js";
-import "./agents.config-DckCExUX.js";
+import "./agents.config-DqWxpgkX.js";
 import "./dm-policy-shared-KlzpDeT_.js";
 import "./node-service-DxPZ_ZFk.js";
 import "./status.update-8HXdAdwz.js";
 import "./skills-install-B8r7cGKR.js";
-import "./update-runner-DG5x7t--.js";
+import "./update-runner-D99V_zHX.js";
 import { t as resolveAgentSessionDirs } from "./session-dirs-CBqamQff.js";
 import { i as shouldIncludeHook, r as resolveHookConfig, t as loadWorkspaceHookEntries } from "./workspace-D2fHsr-Z.js";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -5409,6 +5409,174 @@ function applyGatewayLaneConcurrency(cfg) {
 	setCommandLaneConcurrency(CommandLane.Subagent, resolveSubagentMaxConcurrent(cfg));
 }
 
+//#endregion
+//#region src/infra/long-task-janitor.ts
+const TASK_FILE_SUFFIXES = [
+	".pid",
+	".cmd",
+	".started",
+	".log",
+	".status"
+];
+const TASK_FILE_PREFIX = "task-";
+const DEFAULT_TASK_FILE_AGE_MS = 10080 * 60 * 1e3;
+const DEFAULT_SWEEP_INTERVAL_MS = 1440 * 60 * 1e3;
+function defaultIsPidAlive(pid) {
+	try {
+		process.kill(pid, 0);
+		return true;
+	} catch (err) {
+		if (err.code === "EPERM") return true;
+		return false;
+	}
+}
+/**
+* Sweep dead-task state files from a single workspace directory.
+*
+* A task-id is eligible for sweep when its recorded PID is no longer alive
+* AND the oldest of its state files is older than ageMs. Conservative on
+* purpose: leaving a stale set for one extra cycle is harmless; deleting
+* the state of a live task is not.
+*
+* Orphans without a `.pid` file (parent crashed before line 180) are also
+* caught — we key on any task-<id>.<suffix> match.
+*/
+async function sweepLongTaskFiles(workdir, options = {}) {
+	const result = {
+		scanned: 0,
+		swept: 0,
+		errors: 0,
+		sweptIds: []
+	};
+	const now = options.now ?? Date.now();
+	const ageMs = options.ageMs ?? DEFAULT_TASK_FILE_AGE_MS;
+	const isPidAlive = options.isPidAlive ?? defaultIsPidAlive;
+	let entries;
+	try {
+		entries = await fs.promises.readdir(workdir);
+	} catch {
+		return result;
+	}
+	const taskIds = /* @__PURE__ */ new Set();
+	for (const entry of entries) {
+		if (!entry.startsWith(TASK_FILE_PREFIX)) continue;
+		for (const suffix of TASK_FILE_SUFFIXES) if (entry.endsWith(suffix)) {
+			const id = entry.slice(5, -suffix.length);
+			if (id.length > 0) taskIds.add(id);
+			break;
+		}
+	}
+	for (const taskId of taskIds) {
+		result.scanned++;
+		const pidPath = path.join(workdir, `${TASK_FILE_PREFIX}${taskId}.pid`);
+		let pid = 0;
+		let pidStatMs = null;
+		try {
+			const pidText = await fs.promises.readFile(pidPath, "utf8");
+			pid = Number.parseInt(pidText.trim(), 10);
+			pidStatMs = (await fs.promises.stat(pidPath)).mtimeMs;
+		} catch (err) {
+			if (err.code !== "ENOENT") {
+				result.errors++;
+				continue;
+			}
+		}
+		if (pid > 0 && Number.isFinite(pid) && isPidAlive(pid)) continue;
+		let oldestMs = pidStatMs ?? Number.POSITIVE_INFINITY;
+		for (const suffix of TASK_FILE_SUFFIXES) {
+			if (suffix === ".pid" && pidStatMs !== null) continue;
+			try {
+				const stat = await fs.promises.stat(path.join(workdir, `${TASK_FILE_PREFIX}${taskId}${suffix}`));
+				if (stat.mtimeMs < oldestMs) oldestMs = stat.mtimeMs;
+			} catch {}
+		}
+		if (!Number.isFinite(oldestMs)) continue;
+		if (now - oldestMs < ageMs) continue;
+		let unlinkErrors = 0;
+		for (const suffix of TASK_FILE_SUFFIXES) try {
+			await fs.promises.unlink(path.join(workdir, `${TASK_FILE_PREFIX}${taskId}${suffix}`));
+		} catch (err) {
+			if (err.code !== "ENOENT") unlinkErrors++;
+		}
+		if (unlinkErrors > 0) result.errors++;
+		else {
+			result.swept++;
+			result.sweptIds.push(taskId);
+		}
+	}
+	return result;
+}
+async function collectAgentWorkspaces(cfg) {
+	const config = cfg ?? loadConfig();
+	const seen = /* @__PURE__ */ new Set();
+	for (const agentId of listAgentIds(config)) try {
+		const ws = resolveAgentWorkspaceDir(config, agentId);
+		if (ws) seen.add(ws);
+	} catch {}
+	return [...seen];
+}
+let janitorTimer = null;
+let janitorBootKick = null;
+function startLongTaskJanitor(options = {}) {
+	if (janitorTimer) return () => stopLongTaskJanitor();
+	const log = getChildLogger({ module: "long-task-janitor" });
+	const intervalMs = options.intervalMs ?? DEFAULT_SWEEP_INTERVAL_MS;
+	const ageMs = options.ageMs ?? DEFAULT_TASK_FILE_AGE_MS;
+	const getWorkspaces = options.getWorkspaces ?? (() => collectAgentWorkspaces());
+	const nowFn = options.now ?? Date.now;
+	const sweep = async () => {
+		let workspaces = [];
+		try {
+			workspaces = await getWorkspaces();
+		} catch (err) {
+			log.warn({ err: String(err) }, "long-task-janitor: collect workspaces failed");
+			return;
+		}
+		let scanned = 0;
+		let swept = 0;
+		let errors = 0;
+		for (const ws of workspaces) try {
+			const r = await sweepLongTaskFiles(ws, {
+				now: nowFn(),
+				ageMs
+			});
+			scanned += r.scanned;
+			swept += r.swept;
+			errors += r.errors;
+		} catch (err) {
+			errors++;
+			log.warn({
+				err: String(err),
+				workdir: ws
+			}, "long-task-janitor: sweep failed");
+		}
+		if (swept > 0 || errors > 0) log.info({
+			scanned,
+			swept,
+			errors
+		}, "long-task-janitor: sweep complete");
+	};
+	janitorBootKick = setTimeout(() => {
+		sweep();
+	}, 6e4);
+	janitorBootKick.unref?.();
+	janitorTimer = setInterval(() => {
+		sweep();
+	}, intervalMs);
+	janitorTimer.unref?.();
+	return () => stopLongTaskJanitor();
+}
+function stopLongTaskJanitor() {
+	if (janitorTimer) {
+		clearInterval(janitorTimer);
+		janitorTimer = null;
+	}
+	if (janitorBootKick) {
+		clearTimeout(janitorBootKick);
+		janitorBootKick = null;
+	}
+}
+
 //#endregion
 //#region src/gateway/server/health-state.ts
 let presenceVersion = 1;
@@ -5497,6 +5665,7 @@ function startGatewayMaintenanceTimers(params) {
 		params.refreshGatewayHealthSnapshot({ probe: true }).catch((err) => params.logHealth.error(`refresh failed: ${formatError(err)}`));
 	}, HEALTH_REFRESH_INTERVAL_MS);
 	params.refreshGatewayHealthSnapshot({ probe: true }).catch((err) => params.logHealth.error(`initial refresh failed: ${formatError(err)}`));
+	startLongTaskJanitor();
 	return {
 		tickInterval,
 		healthInterval,
@@ -11959,7 +12128,7 @@ async function startGatewayServer(port = 18789, opts = {}) {
 	});
 	let glassUiBridgeCleanup = null;
 	if (!minimalTestGateway) {
-		const { createGlassUiBridge } = await import("./glass-ui-ws-hIgOh0Ub.js");
+		const { createGlassUiBridge } = await import("./glass-ui-ws-BBkFBsKB.js");
 		glassUiBridgeCleanup = createGlassUiBridge({
 			wss: glassUiWss,
 			context: gatewayRequestContext,